[{"data":1,"prerenderedAt":845},["ShallowReactive",2],{"project-14240626":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":29,"sentiment":30,"stance_mix":31,"scored_comments":36,"aspects":37,"strip":51,"post_text":52,"what":53,"said":90,"maker_in_thread":204,"shape":213,"grid":216,"attempts":797,"same_week":808,"maker_shows":39,"maker_hidden":837,"reader_version":838,"card":839},"14240626","Kryptonite","a new home for your SSH private key","title","Show HN: Kryptonite – a new home for your SSH private key","https:\u002F\u002Fkrypt.co","krypt.co","4kevinking",1493666615,2017,338,219,58,2242,3,"legend","security_privacy","ssh key management","mobile_app",[24,25,26,27,28],"ssh key","ssh private key","phone authentication","yubikey alternative","ssh agent","mixed",-0.083,{"positive":32,"neutral":33,"mixed":34,"critical":35},23,35,5,30,93,{"idea":38,"privacy":41,"pricing":43,"execution":46,"docs":48,"design":49,"performance":50},{"positive":39,"critical":40},2,4,{"positive":34,"critical":42},15,{"positive":44,"critical":45},1,0,{"positive":40,"critical":47},7,{"positive":44,"critical":44},{"positive":40,"critical":44},{"positive":44,"critical":45},[45,34,34,45,45,45,44,44,18,34,39,18,45,45,18,44,34,40,44,44,44,44,34,39,18,18,34,44,40,39,40,39,44,40,45,44,39,40,40,18],null,{"problem":54,"audience":64,"pricing":52,"motivation":72,"time_to_build":52,"stack":76,"openness":87,"stage":88,"team_size":89},{"value":55,"source":56,"evidence":57},"Keeps SSH private keys off the computer by storing them on a phone","maker",[58,61],{"id":59,"by":11,"text":60},"14240633","Hey HN! We've built a way to generate an SSH key on your phone and use it from your computer such that the private key never leaves the phone. We were inspired by the threat…",{"id":62,"by":11,"text":63},"14241144","Any user-level application on your computer can read the SSH key -- you'll never know if it's used or sent off somewhere. Even passphrase encrypted keys are vulnerable. Check out…",{"value":65,"source":66,"evidence":67},"Developers and sysadmins who use SSH","inferred",[68,69],{"id":59,"by":11,"text":60},{"id":70,"by":11,"text":71},"14241199","Kryptonite allows you to use SSH on your computer, but authenticate with a private key protected on your phone. It doesn't require any changes to the server, just the Kryptonite…",{"value":73,"source":56,"evidence":74},"Threat model of USB HSMs like Yubikey, but a free, open source, BYOD alternative",[75],{"id":59,"by":11,"text":60},[77,83],{"value":78,"source":56,"evidence":79},"Go",[80],{"id":81,"by":11,"text":82},"14241535","Thanks! We love Go for its SSH support and Rust for its dylib \u002F crypto libraries.",{"value":84,"source":56,"evidence":85},"Rust",[86],{"id":81,"by":11,"text":82},"open_source","beta","team",{"praise":91,"objections":113,"requests":149,"questions":173,"alternatives":188},[92,104],{"value":93,"source":94,"evidence":95},"Good idea that uses the client instead of the server","commenter",[96,100],{"id":97,"by":98,"text":99},"14241691","y7","Clever that it uses the client instead of the server! I've dabbled with phone-based authentication via a server-side PAM module before, but you generally don't have full control…",{"id":101,"by":102,"text":103},"14241761","tptacek","I haven't reviewed the implementation, but this is a really good idea. I want one.",{"value":105,"source":94,"evidence":106},"Phones are more secure than laptops for keys",[107,110],{"id":108,"by":102,"text":109},"14241752","* Every application on the phone is sandboxed. * The disk is encrypted by default, and the OS is aggressive about keeping it encrypted; a booted-up computer is almost always…",{"id":111,"by":102,"text":112},"14247585","HSIC is USB. It's an industry standard. In modern flagship phone designs, the baseband is an adversarial component. It isn't trusted with access to AP memory. It's accessed like…",[114,129,139],{"value":115,"source":94,"evidence":116},"Cannot back up the private key; losing the phone is a risk",[117,121,125],{"id":118,"by":119,"text":120},"14241126","bizzleDawg","Obvious question - What happens when the phone containing the private key is lost?",{"id":122,"by":123,"text":124},"14242643","xg15","The faq says there is intentionally no way to extract the private key due to security. But this means I need a second account in case my phone gets lost - the key of which I once…",{"id":126,"by":127,"text":128},"14241276","trizic","Your FAQ says you cannot backup your private key. So does that mean if your service gets attacked by DDoS or has unexpected downtime, you will not be able to SSH into your server?",{"value":130,"source":94,"evidence":131},"Android lacks ed25519 and key import\u002Fpaper backup at launch",[132,136],{"id":133,"by":134,"text":135},"14245029","tscs37","This looks interesting but until Ed25519 on Android, importing existing keys and Paper Backups are supported it's a no-go for me. For some things I trust a paper backup in a…",{"id":137,"by":11,"text":138},"14241261","1) We are planning to support multiple private keys, but currently only support a single key pair. 2) Android doesn't yet support ed25519 but it is coming. 3) We would consider…",{"value":140,"source":94,"evidence":141},"Phone trust and malware concerns versus hardware tokens",[142,146],{"id":143,"by":144,"text":145},"14241485","shmel","It sounds very hipster and all, but how is a phone more trustworthy than a Linux PC? Cool, we don't need to trust a PC, now we have to trust a phone and pretend that malware for…",{"id":147,"by":11,"text":148},"14241509","The attack surface may seem smaller for USB tokens, but storing the pin for say a Yubikey allows malware to use the key without restriction. Also, these USB devices don't have a…",[150,157,166],{"value":151,"source":56,"evidence":152},"Support multiple keys",[153,154],{"id":137,"by":11,"text":138},{"id":155,"by":11,"text":156},"14244096","Correct, we currently only support one key, but multiple key support is in the works!",{"value":158,"source":56,"evidence":159},"Key backup or transfer to other devices",[160,163],{"id":161,"by":11,"text":162},"14242706","The current version is designed for hosted services like GitHub, redeployable infrastructure, and servers to which multiple people have access. We totally understand your use…",{"id":164,"by":11,"text":165},"14242065","That is correct. We will also soon release a way to copy a key from one device to another by scanning a QR code.",{"value":167,"source":94,"evidence":168},"Fish shell support",[169],{"id":170,"by":171,"text":172},"14243130","snowpalmer","Looks interesting. However, it seems to maybe assume you're using bash? Using the fish-shell it seems to have simply broken ssh and git operations with incorrect syntax. I had to…",[174,178],{"value":175,"source":94,"evidence":176},"What happens if the phone is lost?",[177],{"id":118,"by":119,"text":120},{"value":179,"source":94,"evidence":180},"Are communications routed through Kryptonite servers?",[181,185],{"id":182,"by":183,"text":184},"14241104","akerl_","Are the communications between the phone and the computer going via the kryptonite servers?",{"id":186,"by":11,"text":187},"14241157","No -- we treat every communication channel as untrusted. All communication between the phone and computer is encrypted with session keys established when you pair by scanning the…",[189,197],{"value":190,"source":94,"evidence":191},"Yubikey and other USB hardware tokens",[192,196],{"id":193,"by":194,"text":195},"14241107","falcolas","Seems quite similar to using a Yubikey to house your SSH key, just with bluetooth and your phone. A bit less secure, but still quite the interesting tool.",{"id":143,"by":144,"text":145},{"value":198,"source":94,"evidence":199},"Ledger Nano S SSH applet",[200],{"id":201,"by":202,"text":203},"14245918","simonvc","There's a GPG\u002FSSH applet for the ledger Nano S now that has a tiny screen and buttons...",{"comments":205,"answered":206,"key":207},19,12,[208,209,212],{"id":147,"text":148},{"id":210,"text":211},"14242568","Point taken. Unfortunately when you touch the key you still can't verify exactly what you are approving.",{"id":59,"text":60},{"commenters":214,"max_depth":206,"maker_replies":205,"first_comment_mins":44,"lifespan_hours":215},116,258,[217,219,221,225,227,229,232,234,237,239,242,246,249,251,253,255,257,259,262,264,266,268,271,274,277,280,282,285,288,290,293,296,299,301,303,306,308,312,315,317,320,322,325,328,330,333,336,340,343,346,349,351,353,356,359,362,366,368,371,374,377,379,381,383,386,389,391,394,396,398,401,403,405,407,409,411,413,415,417,419,421,424,428,429,432,434,437,441,444,447,450,453,457,458,461,464,467,471,474,477,480,481,483,486,490,493,496,498,501,503,506,509,512,515,517,519,521,523,526,527,530,531,535,537,540,544,547,550,553,554,557,559,562,565,567,570,575,578,579,581,585,587,590,592,594,599,601,603,605,607,609,613,615,618,620,623,626,629,630,634,639,641,644,647,650,653,655,658,661,663,667,669,670,671,674,676,679,682,684,687,689,693,697,699,701,704,706,708,710,712,714,715,718,720,723,728,731,733,736,737,739,741,744,747,752,756,761,765,768,772,776,778,782,784,786,788,792,795],[143,45,45,218,144,45],"commenter\u002Fcritical\u002Fidea",[147,45,45,220,11,44],"maker\u002Fneutral\u002Fidea",[222,45,45,223,224,45],"14242487","commenter\u002Fneutral\u002Fnone","packetized",[210,45,45,226,11,44],"maker\u002Fneutral\u002Fnone",[201,45,45,228,202,45],"other\u002Fneutral\u002Fnone",[230,45,45,228,231,45],"14242722","wwwv",[108,45,34,233,102,45],"project\u002Fpositive\u002Fidea",[235,45,45,223,236,45],"14241818","plange",[238,45,45,223,102,45],"14241907",[240,45,45,228,241,45],"14242524","stcredzero",[243,45,45,244,245,45],"14242530","other\u002Fneutral\u002Fprivacy","dv_dt",[247,45,45,248,102,45],"14242640","commenter\u002Fneutral\u002Fprivacy",[250,45,45,244,245,45],"14242800",[252,45,45,244,102,45],"14243025",[254,45,45,244,245,45],"14247335",[111,45,34,256,102,45],"project\u002Fpositive\u002Fprivacy",[258,45,45,223,245,45],"14248639",[260,45,45,223,261,45],"14242673","rileytg",[263,45,45,223,224,45],"14242545",[265,45,45,228,102,45],"14242648",[267,45,45,228,261,45],"14242672",[269,45,45,228,270,45],"14243047","spilk",[272,45,45,228,273,45],"14247592","edutechnion",[275,45,45,228,276,45],"14243549","ryukafalz",[278,45,45,244,279,45],"14243684","derefr",[281,45,45,248,276,45],"14248644",[283,45,45,228,284,45],"14243693","plttn",[286,45,45,228,287,45],"14244490","hdhzy",[289,45,45,228,261,45],"14242665",[291,45,45,223,292,45],"14243371","ams6110",[294,45,45,223,295,45],"14243865","thedufer",[297,45,45,223,298,45],"14244286","bigiain",[300,45,45,228,261,45],"14244336",[302,45,45,228,298,45],"14244400",[304,45,45,228,305,45],"14244940","a-saleh",[307,45,45,228,261,45],"14284039",[309,45,44,310,311,45],"14242714","project\u002Fcritical\u002Fprivacy","user5994461",[313,45,44,310,314,45],"14242996","throwaway2048",[316,45,45,223,102,45],"14243042",[318,45,45,244,319,45],"14243599","bitexploder",[321,45,44,310,292,45],"14243651",[323,45,45,223,324,45],"14243791","yzmtf2008",[326,45,45,223,327,45],"14244083","h4waii",[329,45,45,228,102,45],"14243000",[331,45,45,223,332,45],"14243263","sasas",[334,45,18,335,224,45],"14243869","project\u002Fneutral\u002Fpricing",[337,45,45,338,339,45],"14244160","commenter\u002Fneutral\u002Fpricing","prewett",[341,45,45,223,342,45],"14245388","ithkuil",[344,45,45,244,345,45],"14246677","0xCMP",[347,45,45,223,348,45],"14247069","sangnoir",[350,45,45,223,345,45],"14248142",[352,45,45,244,102,45],"14247895",[354,45,45,338,355,45],"14245846","mgcross",[357,45,34,256,358,45],"14244567","raggi",[360,45,44,310,361,45],"14243898","developer2",[363,45,18,364,365,45],"14245941","project\u002Fneutral\u002Fprivacy","mauz0r",[367,45,44,310,361,45],"14262363",[369,45,34,256,370,45],"14246545","divegeek",[372,45,44,310,373,45],"14244625","peterwwillis",[375,45,45,376,102,45],"14245961","commenter\u002Fcritical\u002Fnone",[378,45,45,223,373,45],"14248076",[380,45,45,223,102,45],"14250559",[382,45,45,223,373,45],"14250809",[384,45,18,364,385,45],"14245574","jancsika",[387,45,45,223,388,45],"14245809","jamespo",[390,45,45,223,102,45],"14245943",[392,45,45,223,393,45],"14246383","Sir_Cmpwn",[395,45,45,223,102,45],"14246533",[397,45,45,223,393,45],"14246782",[399,45,45,223,400,45],"14247107","pfg",[402,45,45,223,102,45],"14247115",[404,45,45,223,393,45],"14247227",[406,45,45,223,102,45],"14247502",[408,45,45,223,393,45],"14247650",[410,45,45,223,102,45],"14247806",[412,45,45,223,400,45],"14247543",[414,45,45,223,385,45],"14247610",[416,45,45,223,102,45],"14247640",[59,44,45,418,11,44],"project\u002Fneutral\u002Fidea",[420,44,18,418,194,45],"14241146",[422,44,45,228,423,45],"14245304","StavrosK",[425,44,18,426,427,45],"14241195","maker\u002Fneutral\u002Fexecution","newman314",[137,44,45,426,11,44],[430,44,44,431,102,45],"14241772","project\u002Fcritical\u002Fexecution",[433,44,45,426,11,44],"14241920",[435,44,18,426,436,45],"14242045","dolmen",[438,44,44,439,440,45],"14241494","project\u002Fcritical\u002Fnone","pquerna",[442,44,45,228,443,45],"14244192","dudus",[445,44,45,223,446,45],"14244325","shimon_e",[448,44,45,223,449,45],"14244342","stordoff",[451,44,45,223,452,45],"14246275","Ajedi32",[454,44,34,455,456,45],"14241510","project\u002Fpositive\u002Fexecution","jaytaylor",[81,44,45,426,11,44],[459,44,44,310,460,45],"14245827","BlackLotus89",[462,44,34,256,463,45],"14246402","sp0ck",[465,44,34,466,261,45],"14242696","project\u002Fpositive\u002Fnone",[468,44,18,469,470,45],"14245939","project\u002Fneutral\u002Fnone","j_s",[472,44,45,223,473,45],"14263044","stephenr",[475,44,18,469,476,45],"14243034","laken",[478,44,44,431,479,45],"14244087","cynix",[155,44,45,426,11,44],[482,44,18,469,479,45],"14244150",[484,39,44,310,485,45],"14244126","lucb1e",[487,39,18,488,489,45],"14244161","maker\u002Fneutral\u002Fprivacy","agrinman",[491,39,44,310,492,45],"14245454","claudius",[494,39,45,223,495,45],"14246071","forgotpwtomain",[497,39,44,310,485,45],"14245472",[499,39,44,500,495,45],"14246303","project\u002Fcritical\u002Fdocs",[502,39,45,223,345,45],"14246705",[504,39,44,310,505,45],"14323767","jobbee",[507,39,45,248,508,45],"14244304","ptman",[510,39,45,223,511,45],"14244310","johncolanduoni",[513,39,45,223,514,45],"14245057","floatboth",[516,39,45,223,511,45],"14245904",[518,39,45,223,514,45],"14245921",[520,39,45,223,511,45],"14246186",[122,18,44,522,123,45],"project\u002Fcritical\u002Fidea",[524,18,45,223,525,45],"14242677","detaro",[161,18,45,220,11,44],[528,18,34,529,123,45],"14244184","maker\u002Fpositive\u002Fnone",[101,40,34,233,102,45],[532,40,34,533,534,45],"14241958","project\u002Fpositive\u002Fdesign","patio11",[536,40,45,248,236,45],"14242204",[538,40,45,248,539,45],"14242700","kasey_junk",[541,40,18,542,543,45],"14242823","project\u002Fneutral\u002Fdesign","pvg",[545,40,18,542,546,45],"14243250","jitl",[548,40,45,248,549,45],"14247290","mhw",[551,40,45,244,552,45],"14243880","ktta",[97,34,18,364,98,45],[555,34,44,310,556,45],"14243369","sdca",[558,34,45,248,324,45],"14243846",[560,34,18,364,561,45],"14245003","xorfish",[563,34,45,248,564,45],"14245479","gnur",[566,34,45,223,561,45],"14245791",[568,34,45,228,569,45],"14246456","snorremd",[571,572,18,573,574,45],"14241113",6,"project\u002Fneutral\u002Fdocs","Artemis2",[576,572,18,573,577,45],"14243878","ShakataGaNai",[170,47,44,431,171,45],[580,47,45,426,11,44],"14243148",[582,47,34,583,584,45],"14243490","maker\u002Fpositive\u002Fexecution","nyolfen",[586,47,45,426,11,44],"14244789",[588,47,34,455,589,45],"14245017","rdavis",[591,47,45,583,11,44],"14253247",[593,47,34,455,584,45],"14246809",[595,596,45,597,598,45],"14245628",8,"other\u002Fneutral\u002Fidea","xaduha",[600,596,45,597,470,45],"14245975",[602,596,45,597,598,45],"14247003",[604,596,45,228,470,45],"14247993",[606,596,45,228,598,45],"14248193",[608,596,45,228,470,45],"14248411",[610,611,44,522,612,45],"14252581",9,"V-eHGsd_",[126,614,44,522,127,45],10,[616,614,34,617,489,45],"14241295","project\u002Fpositive\u002Fperformance",[118,619,18,418,119,45],11,[621,619,18,573,622,45],"14241135","daveloyall",[624,619,18,573,625,45],"14241228","vorotato",[627,619,18,220,628,45],"14241306","elahd",[164,619,45,220,11,44],[631,206,18,632,633,45],"14244377","project\u002Fmixed\u002Fidea","hosh",[635,636,18,637,638,45],"14241567",13,"project\u002Fneutral\u002Fexecution","sweis",[640,636,45,426,11,44],"14241610",[642,636,44,643,638,45],"14241697","maker\u002Fcritical\u002Fexecution",[645,646,18,364,231,45],"14242752",14,[648,42,34,533,649,45],"14242780","cyberferret",[651,42,34,652,489,45],"14242841","project\u002Fpositive\u002Fdocs",[654,42,34,533,649,45],"14242925",[656,42,44,657,292,45],"14243413","project\u002Fcritical\u002Fdesign",[659,660,18,418,345,45],"14246802",16,[133,662,44,431,134,45],17,[664,665,18,364,666,45],"14247108",18,"jorangreef",[668,665,18,364,628,45],"14247399",[182,205,18,364,183,45],[186,205,45,488,11,44],[672,205,44,673,183,45],"14241213","maker\u002Fcritical\u002Fprivacy",[675,205,45,488,11,44],"14241309",[677,205,18,469,678,45],"14241419","henryfjordan",[680,205,44,439,681,45],"14241550","bobwaycott",[683,205,45,228,628,45],"14247496",[685,205,45,228,686,45],"14321293","akent",[688,205,18,542,427,45],"14242351",[690,691,18,632,692,45],"14243580",20,"shusson",[694,695,18,364,696,45],"14241079",21,"eof",[698,695,34,256,194,45],"14241118",[700,695,45,223,622,45],"14241159",[702,695,18,364,703,45],"14241124","noja",[705,695,45,223,102,45],"14241785",[707,695,45,223,327,45],"14244119",[709,695,45,223,102,45],"14245936",[711,695,45,223,327,45],"14246377",[713,695,45,223,102,45],"14246606",[62,695,45,364,11,44],[716,695,44,310,717,45],"14241559","gkya",[719,695,45,223,102,45],"14241782",[721,695,44,522,722,45],"14242921","joshribakoff",[724,725,18,726,727,45],"14250971",22,"project\u002Fmixed\u002Fpricing","jmuguy",[729,32,18,418,730,45],"14248725","Corrado",[732,32,18,220,489,45],"14248859",[734,735,18,469,622,45],"14241127",24,[70,735,45,573,11,44],[738,735,44,431,622,45],"14241200",[740,735,45,223,622,45],"14241243",[742,735,45,223,743,45],"14241330","finnn",[193,745,18,746,194,45],25,"project\u002Fmixed\u002Fprivacy",[748,749,34,750,751,45],"14243268",26,"project\u002Fpositive\u002Fpricing","feld",[753,754,34,533,755,45],"14244725",27,"vikeri",[757,758,18,759,760,45],"14244517",28,"project\u002Fmixed\u002Fexecution","libeclipse",[762,763,18,469,764,45],"14244783",29,"sleepychu",[766,35,34,466,767,45],"14241014","bartvk",[769,770,34,466,771,45],"14245085",31,"woodylondon",[773,774,18,418,775,45],"14241351",32,"jamiesonbecker",[777,774,45,573,11,44],"14241378",[779,780,44,431,781,45],"14242865",33,"exabrial",[783,780,45,223,543,45],"14242876",[785,780,45,223,781,45],"14242917",[787,780,45,223,479,45],"14244354",[789,790,34,466,791,45],"14243339",34,"dffds",[793,33,44,310,794,45],"14243127","netsec_burn",[796,33,45,573,11,44],"14243160",[798,799,802,805],{"id":4,"t":12,"points":14,"comments":15},{"id":800,"t":801,"points":39,"comments":45},"17829974",1535052688,{"id":803,"t":804,"points":44,"comments":18},"17836220",1535130636,{"id":806,"t":807,"points":206,"comments":45},"17853508",1535396433,[809,814,819,824,829,833],{"id":810,"name":811,"points":812,"category":813},"14226889","jacquesmattheij.com",1264,"hardware",{"id":815,"name":816,"points":817,"category":818},"14254357","Cone",418,"dev_tools",{"id":820,"name":821,"points":822,"category":823},"14212054","Helio Workstation",305,"creative",{"id":825,"name":826,"points":827,"category":828},"14245538","VPS Comparison",228,"infrastructure",{"id":830,"name":831,"points":832,"category":818},"14210877","Pygit",208,{"id":834,"name":835,"points":836,"category":828},"14246334","MStream",162,false,"v2",{"id":840,"name":5,"line":6,"ai":837,"cat":20,"year":13,"points":14,"comments":15,"rec":29,"s":841,"top":18,"kw":842,"maker":11,"domain":10,"tier":19,"attempts":40,"strip":843,"url":9,"mix":844,"praise":93,"objection":115,"sub":21},14240626,-0.08,[24,25,26,27,28],"0550001135230031541111523351424214012443",[32,33,34,35],1794036554962]